Weaponizing self-xss - NetSPI

Maybe you’re a web app pentester who gets frustrated with finding self-xss on sites you test, or maybe you’re a website owner who keeps rejecting self-xss as a valid vulnerability. This post is intended to help both understand the risk involved in self-xss and how it can possibly be used against other users. So what […]

ASafety » [PoC-XSS] Leveraging Self-XSS via WYSINWYC

Tryhackme: Weaponizing Vulnerabilities

TrustedSec Tricks for Weaponizing XSS

TrustedSec Tricks for Weaponizing XSS

Reflected XSS, How to Prevent a Non-Persistent Attack

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue

GitHub - Correia-jpv/fucking-awesome-web-security: 🐶 A curated

Turning Self-XSS into non-Self Stored-XSS via Authorization Issue

GitHub - NetW0rK1le3r/PENTESTING-BIBLE

GitHub - mishmashclone/qazbnm456-awesome-web-security: https